The cortex.xsoar collection includes Ansible modules to help automate the management of Palo Alto Cortex XSOAR.

Repository to store xsoar course (Cortex XSOAR - Security Orchestration and Automation Course) free materials. You can purchase the course at https://www.udemy.com/course/xsoar-security-orchestration-and-automation-course/?referralCode=8F469AAD51A79BAA5950&couponCode=HAPPYAUTOMATING50

Integration between Demisto/XSOAR and Claroty xDome

Helper script for migrating custom content developed in UI to CI&CD friendly Content Packs

🚀 Build seamless integrations with Palo Alto Networks Cortex XSOAR 8.x using this native Go API client for efficient incident management and error handling.

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

X-n8 (Exnate) is an Agentic SOC Playbook collection bridging n8n’s AI agility with Palo Alto XSOAR’s orchestration. Covering 250+ use cases from Cloud to IAM it uses AI Agents for dynamic SIEM alert analysis and automated remediation. Aligning with MITRE ATT&CK, X-n8 transforms manual workflows into a scalable, autonomous defense ecosystem.

Native Go API client for Palo Alto Networks Cortex XSOAR 8.x / XSIAM

Simple Integration for the free InternetDB-API

The repo contains a few scripts which might be helpful to batch-update records in Cortex XSOAR.